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Abstract 

We consider a fundamental problem in data structures, static predecessor searching: Given a subset 
S of size n from the universe [to], store S so that queries of the form "What is the predecessor of 
X in ST' can be answered efficiently. We study this problem in the cell probe model introduced by 
Yao lYaoSll . Recently, Beame and Fich IBF99I obtained optimal bounds on the number of probes 
needed by any deterministic query scheme if the associated storage scheme uses only n^'-^^ cells of 
word size (logm)'^^^-' bits. 

We give a new lower bound proof for this problem that matches the bounds of Beame and Fich. 
Our lower bound proof has the following advantages: it works for randomised query schemes too, while 
Beame and Fich's proof works for deterministic query schemes only. In addition, it is simpler than 
Beame and Fich's proof. In fact, our lower bound for predecessor searching extends to the 'quantum 
address-only' query schemes that we define in this paper In these query schemes, quantum parallelism is 
allowed only over the 'address lines' of the queries. These query schemes subsume classical randomised 
query schemes, and include many quantum query algorithms like Grover's algorithm IIGro96l . 

We prove our lower bound using the round elimination approach of Miltersen, Nisan, Safra and 
Wigderson IMNSW98 1. Using tools from information theory, we prove a strong round elimination 
lemma for communication complexity that enables us to obtain a tight lower bound for the predecessor 
problem. Our strong round elimination lemma also extends to quantum communication complexity. We 
also use our round elimination lemma to obtain a rounds versus communication tradeoff for the 'greater- 
than' problem, improving on the tradeoff in IMNSW98I . We believe that our round elimination lemma 
is of independent interest and should have other applications. 

1 Introduction 

1.1 The problem and the model 

A static data structure problem consists of a set of data D, a set of queries Q, a set of answers A, and a 
function f : D x Q ^ A. The aim is to store the data efficiently and succinctly, so that any query can be 
answered with only a few probes to the data structure. Static predecessor searching is a well studied problem 

in data structure design (see e.g. l.vEBKZ77. vEB77...Wil85 And96..Ait88. Mil94 MNSW98 BF9 9n. Data 

structures for answering predecessor queries can be used to construct data structures to answer other queries 
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like rank (finding the number of elements in S that are smaller than or equal to x) and nearest neighbour 
(finding an element in S closest to x) efficiently. This motivates the need to design efficient data structures 
that support predecessor queries. 

Let [m] denote the set of integers {0,...,m — 1}. 

Definition 1 (Static predecessor searching) In the problem of {m, n)-static predecessor seaixhing, we are 
given a subset S of size nfrom the universe [rn\. Our goal is to store the set S succinctly so that queries of 
the form "What is the predecessor of x in S?" for x G [m] can be answered with a few probes to the data 
structure. If x has no predecessor in S, that is, x is smaller than every element in S, then return a default 
value, say, —1. 

In this paper, we study the static predecessor searching problem in Yao's cell probe model fYaoSll. The 
cell probe model is a natural and general model for proving upper and lower bound results in data structures. 



Definition 2 (The cell probe model) An {s, w, t) cell probe scheme /or a static data structure problem f : 
D X Q ^ A has two components: a storage scheme and a query scheme. The storage scheme stores 
the data d £ D as a table T[d] of s cells, each cell of word size w bits. The storage scheme is classical 
deterministic. Given a query q £ Q, the query scheme computes f{d,q) by making at most t probes to 
T[d], where each probe reads one cell at a time, and the probes can be adaptive. In a deterministic cell 
probe scheme the query scheme is classical deterministic, in a randomised cell probe scheme it is classical 
randomised, and in an address-only quantum cell probe scheme it is bounded error address-only quantum 
(defined in Section UHl . 

Since in the cell probe model we only charge a scheme for the number of probes made to memory cells and 
for the total number of cells of storage used, and all internal computation is for free, lower bounds proved 
in the cell probe model hold in all reasonable data structure models (e.g. the unit cost RAM with the same 
word size) and give us insight into the intrinsic difficulty of the problem. 

The goal is to design cell probe schemes for (m, n)-static predecessor searching using small space i.e. 
s = n*^(^) and w = 0(log m), and at the same time making a small number of probes t in the worst case. 



1.2 Previous work 

We start by describing the sequence of results that lead to the currently best known upper bounds for 
the (m, n)-static predecessor problem. For a long time, the best upper bound known for the predecessor 
problem was due to the data structures of van Emde Boas et al. |vEBKZ77 vEBTTj, and the data struc- 
tures of Fredman and Willard |FW93|. In their papers, van Emde Boas et al. lvEBKZ771 IvEBTTl gave 
a O(logm), O(loglogm)) deterministic cell probe solution for predecessor. The main drawback 

of their solution is that the number of cells used is very large. Later, Willard IWil85J reduced the num- 
ber of cells used to 0{n). Building on the work of van Emde Boas et al. and Willard, Fredman and 
Willard I FW93I . and Andersson IAnd96l designed (0(n), 0(log m), 0(\/log^)) deterministic cell probe 
schemes for predecessor. Recently, Beame and Fich I BF99I improved on these upper bounds and showed a 
(gft^)'0(logm),t), where t = uAn {o {j^^^) , O {,/^)} , dctcrrnMstic cell probe 
scheme for predecessor. 

The first lower bound for the (m,n)-static predecessor problem was proved by Ajtai |Ajt88 1, who 



showed that no (n'^(^\ 0(log m), t) deterministic cell probe scheme for predecessor can have constant 
number of probes t. Miltersen IMil94l observed that there is a close connection between the cell probe 
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complexity of a data structure problem and the communication complexity of a related communication 
game, and used this to improve Ajtai's lower bound to ^}{^/^ogTogm ) probes. Recently, building on Ajtai's 
and Miltersen's work, Beame and Fich LBF9 9 1 showed that their data structure described above is indeed 
optimal in the following sense: any (n'^(^), 2('°s»")^ ^ deterministic cell probe scheme for predecessor 

must satisfy t = Q lo'g lo^g io™m ) ^ function of m, and any (n*^(^\ (log m)^^^\t) deterministic cell probe 

scheme for predecessor must satisfy t = Q (y^ io'giog ^) ^ function of n. Similar lower bounds were 
proved by Xiao ^ia92 1. We would like to stress here that all the above lower bound proofs are complicated 
with many technical details. Also, they hold for deterministic cell probe schemes only. 

The result of Beame and Fich gives rise to the following two questions: does their lower bound hold 
for randomised query schemes as well? It has been observed recently that randomisation enormously helps 
in the case of membership queries IBMRVOOl and approximate nearest neighbour queries ILiu03l IKOR98I 
|IM98 CR03 I, and one might believe that it could help answer predecessor queries quickly as well. Secondly, 
is it possible to give a simple proof of the lower bound result of Beame and Fich? 

A partial answer to both of the above questions was given by Miltersen, Nisan, Safra and Wigder- 
son ||vINSW98l. In their paper, they proved a general round elimination lemma for communication com- 
plexity. Using the connection between cell probe complexity of data structures and communication com- 
plexity, and their round elimination lemma, they showed the following lower bound for the predecessor 
problem: any {n'-^^^\ (log m)'^(^\ t) randomised cell probe scheme for (m, n)-static predecessor must sat- 
isfy t = U{\/log logm) as a function of m, and t = Q((logre)^/'^) as a function of n. Though the lower 
bound proved by I MNSW9'5I is weaker than that of [BF99 |, their approach had two advantages: their lower 
bound holds for randomised query schemes too, and the proof is much simpler. In their paper, Miltersen et 
al. ask if their round elimination based approach can be strengthened to obtain the lower bound of Beame 
and Fich. 

1.3 Our Results 

We answer the question posed by Miltersen, Nisan, Safra and Wigderson. Our main result in this paper 
shows that the lower bound of Beame and Fich holds for address-only quantum cell probe schemes (and 
hence, for randomised cell probe schemes) as well. 

1.3.1 The Predecessor Problem 

Result 1 Suppose there is a {rP^^^ , (log m)'^^^^ , t) randomised cell probe scheme for the (m, n)-static pre- 
decessor problem with error probability less than 1/3. Then, 

^ = ^ ( logioSm ) a function of m; 

(b) t = Q (y^ log fog n ) '^^ a function of n. 

The same lower bound also holds for address-only quantum cell probe schemes for static predecessor 
searching. 

We prove our lower bound for predecessor searching by combining the approach in IMNSW98I with a 
new round elimination lemma for communication complexity. Our round elimination lemma is a strength- 
ening of the one proved in IM NSW98L and we believe it is of independent interest. 
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1.3.2 An improved round elimination lemma 

In this paper, all communication protocols are two-party. The error probability of a randomised or quantum 
communication protocol is defined as the maximum error of the protocol for any input. For a general 
introduction to (classical) communication complexity, see the book by Kushilevitz and Nisan ['KN97II. 

Let f : X X y ^ Z be any communication problem. Let us denote by /(")'^ a new communication 
game in which Alice is given xi,X2, ■ ■ ■ ,Xn G X, and Bob is given y € y, i [n] and also copies of 
xi,X2, ■ ■ ■ , Their task is to compute f{xi, y). /(")'^ is defined similarly. Intuitively, if Alice starts the 
communication and her first message is much smaller than n bits, then she is unlikely to send much useful 
information about Xi to Bob as she is unaware of i. So it should be possible to eliminate the first message of 
Alice, giving rise to a protocol where Bob starts, with one less round of communication, and having similar 
message complexity and error probability. The round elimination lemma captures this intuition. 

Definition 3 A [t; /i, Z2, • • • , h]"^ li,l2, ■ ■ ■ , h]^) communication protocol is one where Alice (Bob) starts 
the communication, the ith message is li bits long, and the communication goes on for t rounds. 

Result 2 Suppose the communication game /(")'"^ has a [t; Zi, ^2, ■ ■ ■ , hY^ public coin randomised protocol 
with error less than 5. Then, f has a [t — l;l2, ■ ■ ■ ik]^ public coin randomised protocol with error less 
than e = 6 + (l/2)(2/i In2/ri)^/^. A similar result holds for public coin quantum protocols (defined in 
Section \T^ too. 

The proof of this lemma uses tools from information theory. In particular, we use the average encoding 
theorem of Klauck, Nayak, Ta-Shma and Zuckerman IKNTZOlll . Intuitively, this theorem says that if the 
mutual information between a random variable and its randomised encoding is small, then the probabil- 
ity distributions on code words for various values of the random variable are indeed close to the average 
probability distribution on code words. 

1.3.3 Applications to other problems 

We prove our lower bound result for predecessor by actually proving a lower bound for the rank parity 
problem. In the rank parity problem, we need to store a subset S of the universe [m] so that given a query 
element x G [m] , we can output whether the number of elements in S less than or equal to x is even or odd. 
Lower bounds for rank parity imply similar lower bounds for some other data structure problems like point 
separation IBF99I and two-dimensional reporting range query (MNSW98|. For details of the reduction 
from rank parity to the above problems, see the respective papers cited above. 

Independently, the round elimination lemma has applications to problems in communication complexity. 
For example, let us consider communication protocols for the 'greater-than' problem GT„ in which Alice 
and Bob are given bit strings x and y respectively of length n each, and the goal is to find out if 2; > y or not 
(treating x,y as integers between and 2" — 1). Miltersen, Nisan, Safra and Wigderson |MNSW98|, and 
Smirnov ISmiSSI have studied rounds versus communication tradeoffs for GT„. Miltersen et al. show an 
Q |^n^/*2~'^W j lower bound for t-round bounded error public coin randomised protocols for GT„. Using 
our stronger round elimination lemma, we improve Miltersen et al.'s result. 

Result 3 The bounded error public coin randomised t-round communication complexity of GT„ is lower 
bounded by r2(n^/*t~^). For bounded error quantum protocols with input-independent prior entanglement 
for GT^, we have a lower bound ofQ.{'n}/^t~^). 
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Remark: The lower bound for quantum protocols is better because, by definition, a quantum protocol 
always sends messages whose length is independent of the input. 

There exists a bounded error classical randomised protocol for GT„ using t rounds of communication 
and having a complexity of 0{n^^* log n). Hence, for a constant number of rounds, our lower bound matches 
the upper bound to within logarithmic factors. For one round quantum protocols, our result implies an Q,{n) 
lower bound for GT„ (which is optimal to within constant factors), improving upon the previous Q,{n/log n) 
lower bound of Klauck |KlaOO|. No rounds versus communication tradeoff for this problem, for more than 
one round, was known earlier in the quantum setting. If the number of rounds is unbounded, then there is a 
private coin classical randomised protocol for GTn using O(logn) rounds of communication and having a 
complexity of O(logn) rNi s93l . An $7(logn) lower bound for the bounded error quantum communication 
complexity of GT„ (irrespective of the number of rounds) follows from Kremer's result liKre95 1 that the 
bounded error quantum communication complexity of a function is lower bounded (up to constant factors) 
by the logarithm of the one round (classical) deterministic communication complexity. 

1.4 Our techniques 

The starting point of our work is the paper of Miltersen, Nisan, Safra and Wigderson fMNSW98l showing 
lower bounds for randomised cell probe schemes for predecessor. The crux of Miltersen et al.'s lower bound 
is the following round elimination lemma for communication complexity. 

Fact (Round elimination lemma, IIMNSW98I ) Let f : X xy ^ Z be a function. Let e,5 > Obe real num- 
bers. Suppose that 5 < e^(1001n(8/e))~^. Suppose the communication game /("^'^ has a . . . j/*]"^ 
public coin randomised protocol with error less than 6. Also suppose that n > 20(/i In 2 + In 5)e~^. Then 
there is a [t — l;l2, ■ ■ ■ , h]^ public coin randomised protocol for f with error less than e. 

Note that in the round elimination lemma of IMNSW98I . the dependence between 6 and e is quadratic. In 
their paper, Miltersen et al. ask if their round elimination based approach can be strengthened to obtain 
Beame and Fich's IIBF99I lower bound. 

Our first observation is that if we can prove a stronger round elimination lemma in which 6 and e are 
related by a small additive term, and the additive term is upper bounded by (^)^^^\ then we can obtain the 
lower bound of Beame and Fich for randomised cell probe schemes solving the predecessor problem. 

Our next observation is that Klauck, Nayak, Ta-Shma and Zuckerman IIKNTZOll have studied rounds 
versus quantum communication tradeoffs for the 'tree pointer chasing' problem using tools from quantum 
information theory. In fact, their quantum lower bound for the 'tree pointer chasing' problem is better 
than its previously known classical lower bound |MNSW98|! An important ingredient of their quantum 
lower bound was a quantum information-theoretic result called average encoding theorem. This result 
says informally that when messages carry very little information about the input, the average message is 
essentially as good as the individual messages. This result gives us a new way of attacking the round 
elimination problem. The information-theoretic round reduction arguments in [KNTZOl] are average-case 
(under the uniform distribution on the inputs) arguments, and do not immediately give a worst-case result 
like the round elimination lemma. The information-theoretic arguments have to be combined with Yao's 
minimax lemma [Yao77| (also used in the proof of the round elimination lemma in LMNSW98J ) to prove 
the strong round elimination lemma of this paper. The information-theoretic approach brings out more 
clearly the intuition behind round elimination, as opposed to the ad hoc combinatorial proof in IMNSW98 1. 
We beUeve that this strong round elimination lemma is an important technical contribution of this paper. 
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1.5 Organisation of the paper 

We start with some preliminaries in the next section. Assuming the average encoding theorem, we prove an 
intermediate result in Section|3]which allows us to reduce the number of rounds of a communication protocol 
if the first message does not convey much information about the sender's input. Proofs of the classical and 
quantum versions of the average encoding theorem can be found in the appendix for completeness. Using 
the intermediate result, we prove our strong round elimination lemma in Section |3 Sections |3] and |4] each 
have two subsections: the first one treats the classical version of the results and the second one treats the 
quantum version. Using the strong round elimination lemma, we prove the optimal lower bound for the 
predecessor problem in Section|5] The rounds versus communication tradeoff for the 'greater- than' problem 
is sketched in Section|6l We finally conclude mentioning some open problems in Section^] 

2 Preliminaries 

2.1 The address-only quantum cell probe model 

A quantum (s, w, t) cell probe scheme for a static data structure problem f : D x Q A has two compo- 
nents: a classical deterministic storage scheme that stores the data d G D in a table T[d] using s cells each 
containing w bits, and a quantum query scheme that answers queries by 'quantumly probing a cell at a time' 
t times. Formally speaking, the table T[d] is made available to the query algorithm in the form of an oracle 
unitary transform O^- To define Od formally, we represent the basis states of the query algorithm as \ j, b, z), 
where j G [s — 1] is a binary string of length log s, 6 is a binary string of length w, and z is a binary string 
of some fixed length. Here, j denotes the address of a cell in the table T[d], b denotes the qubits which will 
hold the contents of a cell and z stands for the rest of the qubits ('work qubits') in the query algorithm. Od 
maps |j, h, z) to |j, b © T[d]j, z), where T[d]j is a bit string of length w and denotes the contents of the jth 
cell in T[d]. A quantum query scheme with t probes is just a sequence of unitary transformations 

Uo^Od^Ui^Od^ ... Ut-i ^Od^Ut 

where Uj's are arbitrary unitary transformations that do not depend on d (C/j's represent the internal com- 
putations of the query algorithm). For a query q ^ Q, the computation starts in a computational basis state 
|g)|0), where we assume that the ancilla qubits are initially in the basis state |0). Then we apply in suc- 
cession, the operators Uo,Od,Ui, . . . , Ut-i, Od,Ut, and measure the final state. The answer consists of the 
values on some of the output wires of the circuit. We say that the scheme has worst case error probability 
less than e if the answer is equal to f{d, q), for every {d, q) ^ D x Q, with probability greater than 1 — e. 
The term 'bounded error quantum scheme' means that e = 1/3. 

We now formally define the address-only quantum cell probe model. Here the storage scheme is clas- 
sical deterministic as before, but the query scheme is restricted to be 'address-only quantum'. This means 
that the state vector before a query to the oracle Od is always a tensor product of a state vector on the ad- 
dress and work qubits (the {j, z) part in (j, 6, z) above), and a state vector on the data qubits (the b part in 
(j, 6, z) above). The state vector on the data qubits before a query to the oracle Od is independent of the 
query element q and the data d but can vary with the probe number. Intuitively, we are only making use 
of quantum parallelism over the address lines of a query. This mode of querying a table subsumes clas- 
sical (deterministic or randomised) querying, and also many non-trivial quantum algorithms like Grover's 
algorithm |Gro96|, Farhi et al.'s algorithm IFGG S99ll . H0yer et al.'s algorithm [HNS02| etc. satisfy the 
'address-only' condition. For classical (deterministic or randomised) querying, the state vector on the data 
qubits is |0), independent of the probe number. For Grover's algorithm and Farhi et al.'s algorithm, the state 
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vector on the data qubit is (|0) — |l))/\/2, independent of the probe number. For H0yer et al.'s algorithm, 
the state vector on the data qubit is |0) for some probe numbers, and (|0) — |1))/a/2 for the other probe 
numbers. 

2.2 Quantum communication protocols 

In this paper, we adopt the 'interacting unitary quantum circuits' definition of quantum communication 
protocols of Yao IYao93l . Thus, Alice and Bob send a certain number of fixed length messages to each 
other, and the number and length of these messages is independent of their inputs. If Alice's and Bob's 
inputs are in computational basis states, the global state of all the qubits of Alice and Bob is pure at all 
times during the execution of the protocol. Measurements are not allowed during the execution of the 
protocol. At the end of the protocol, the last recipient of a message make a von Neumann measurement in 
the computational basis of certain qubits (the 'answer qubits') in her possession in order to determine the 
answer of the protocol. The choice of 'answer qubits' is independent of Alice's and Bob's inputs. 

We require that Alice and Bob make a secure copy of their inputs before beginning the quantum com- 
munication protocol. This is possible since the inputs to Alice and Bob are in computational basis states e.g. 
CNOT gates can be used for this purpose. Thus, without loss of generality, the input qubits of Alice and 
Bob are never sent as messages, their state remains unchanged throughout the protocol, and they are never 
measured i.e. some work qubits are measured to determine the result of the protocol. We call such quantum 
protocols secure and will assume henceforth that all our quantum protocols are secure. 

We now define the concept of a safe quantum communication protocol, which will be used in the state- 
ment of the quantum round elimination lemma. 

Definition 4 (Safe quantum protocol) A [t;c;li, . . . , k]^ ([t; c;li, . . . , k]^) safe quantum communication 
protocol is a secure quantum protocol where Alice (Bob) starts the communication, the first message is li+c 
qubits long, the ith message, for i > 2, is li qubits long, and the communication goes on for t rounds. We 
think of the first message as having two parts: the 'main part' which is li qubits long, and the 'safe overhead 
part' which is c qubits long. The density matrix of the 'safe overhead' is independent of the inputs to Alice 
and Bob. 

Remarks: 

1. The safe overhead is nothing but a way to send input independent prior entanglement from Alice to 
Bob. The reason we use this notation is that we will later define safe public coin quantum protocols where 
there will be two kinds of input independent prior entanglement, the first being the one provided by the safe 
overhead and the second being the one proved by the public coin. 

2. The reason for defining the concept of a safe overhead, intuitively speaking, is as follows. The commu- 
nication games arising from data structure problems often have an asymmetry between the message lengths 
of Alice and Bob. This asymmetry is crucial to prove lower bounds on the number of rounds of commu- 
nication. In the previous quantum round reduction arguments (e.g. those of Klauck et al. [KNTZOl |), the 
complexity of the first message in the protocol increases quickly as the number of rounds is reduced and the 
asymmetry gets lost. This leads to a problem where the first message soon gets big enough to potentially 
convey substantial information about the input of one player to the other, destroying any hope of proving 
strong lower bounds on the number of rounds. The concept of a safe protocol allows us to get around this 
problem. We show through a careful quantum information theoretic analysis of the round reduction process, 
that in a safe protocol, though the complexity of the first message increases a lot, this increase is confined 
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to the safe overhead and so, the information content does not increase much. This is the key property which 
allows us to prove a round elimination lemma for safe quantum protocols. 

In this paper we will deal with quantum protocols with public coins. Intuitively, a public coin quantum 
protocol is a probability distribution over finitely many (coinless) quantum protocols. We shall henceforth 
call the standard definition of a quantum protocol without prior entanglement as coinless. Our definition is 
similar to the classical scenario, where a randomised protocol with public coins is a probability distribution 
over finitely many deterministic protocols. We note however, that our definition of a public coin quantum 
protocol is not the same as that of a quantum protocol with prior entanglement, which has been studied pre- 
viously (see e.g. ICvDNT98l '). Our definition is weaker, in that it does not allow the unitary transformations 
of Alice and Bob to alter the 'public coin' . 

Definition 5 (Public coin quantum protocol) In a quantum protocol with a public coin, there is, before 
the start of the protocol, a quantum state called a public coin, of the form '^c^/Pc\c) a\c) B, where the 
subscripts denote ownership ofqubits by Alice and Bob, pc are finitely many non-negative real numbers and 
^cPc = 1- Alice and Bob make (entangled) copies of their respective halves of the public coin using CNOT 
gates before commencing the protocol. The unitary transformations of Alice and Bob during the protocol 
do not touch the public coin. The public coin is never measured, nor is it ever sent as a message. 

Hence, one can think of the public coin quantum protocol to be a probability distribution, with probability 
Pc, over finitely many coinless quantum protocols indexed by the coin basis states |c). A safe public coin 
quantum protocol is similarly defined as a probability distribution over finitely many safe coinless quantum 
protocols. 

Remarks: 

1. We need to define public coin quantum protocols in order to make use of the harder direction of Yao's 
minimax lemma [YaoVV |. The minimax lemma is the main tool which allows us to convert 'average case' 
round reduction arguments to 'worst case' arguments. We need 'worst case' round reduction arguments 
in proving lower bounds for the rounds complexity of communication games arising from data structure 
problems. This is because many of these lower bound proofs use some notion of "self-reducibility", arising 
from the original data structure problem, which fails to hold in the 'average case' but holds for the 'worst 
case'. The quantum round reduction arguments of Klauck et al. [KNTZ01| are 'average case' arguments, 
and this is one of the reasons why they do not suffice to prove lower bounds for the rounds complexity of 
communication games arising from data structure problems. 

2. For [t; c; /i, . . . , U]^ safe quantum protocols computing a function /, Yao's minimax lemma says that 
the infimum (worst-case) error of a public coin protocol is equal to the supremum over all input probability 
distributions of the infimum distributional error of a coinless protocol. 

2.3 Predecessor searching and communication complexity 

We first describe the connection between the address-only quantum cell probe complexity of a static data 
structure problem and the quantum communication complexity of an associated communication game. Let 
f : D X Q ^ Ah& Si static data structure problem. Consider a two-party communication problem where 
Alice is given a query q ^ Q, Bob is given a datum d ^ D, and they have to communicate and find out the an- 
swer f{d, q). We have the following lemma, which is a quantum analogue of a lemma of Miltersen IMil94l 
relating cell probe complexity to communication complexity in the classical setting. 
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Lemma 1 Suppose we have an (s, w, t) quantum cell probe solution to a static data structure problem f : 
DxQ A. Then we have a (2t, 0, log s+w, log s+w)^ safe coinless quantum protocol for the correspond- 
ing communication problem. If the query scheme is address-only, we also have a (2t, 0, log s, log s + w)^ 
safe coinless quantum protocol for the corresponding communication problem. The error probability of the 
communication protocol is the same as that of the cell probe scheme. 

Proof: Given a quantum (s, t) cell probe solution to the static data structure problem /, we can get a 
(2i, 0, log s + w., log s + w)^ safe coinless quantum protocol for the corresponding communication problem 
by just simulating the cell probe solution. If in addition, the query scheme is address-only, the messages 
from Alice to Bob need consist only of the 'address' part. This can be seen as follows. Let the state vector of 
the data qubits before the ith query be \6i). \9i) is independent of the query element and the stored data. Bob 
keeps t special ancilla registers in states \6i) , \ < i < t SLt the start of the protocol P. These special ancilla 
registers are in tensor with the rest of the qubits of Alice and Bob at the start of P. Protocol P simulates the 
cell probe solution, but with the following modification. To simulate the ith query of the cell probe solution, 
Alice prepares her 'address' and 'data' qubits as in the query scheme, but sends the 'address' qubits only. 
Bob treats those 'address' qubits together with \0i) in the ith special ancilla register as Alice's query, and 
performs the oracle table transformation on them. He then sends these qubits (both the 'address' as well 
as the ith special register qubits) to Alice. Alice exchanges the contents of the ith special register with her 
'data' qubits (i.e. exchanges the basis states), and proceeds with the simulation of the query scheme. This 
gives us a (2t, 0, log s, log s + w)^ safe coinless quantum protocol with the same error probability as that of 
the cell probe query scheme. ■ 

Remark: In many natural data structure problems log s is much smaller than w and thus, in the address- 
only quantum case, we get a (2t, 0, log s, O(w))"^ safe protocol. In the classical setting of IMi l94l. one 
gets a (2t, 0, log s, w)^ protocol. This asymmetry in message lengths is crucial in proving non-trivial lower 
bounds on t. The concept of a safe quantum protocol helps us in exploiting this asymmetry. 

We now recall some facts about the connection between cell probe schemes for predecessor and commu- 
nication complexity of rank parity from (MNSW98 1. We give proof sketches of these facts for completeness. 

Definition 6 A (t, a, b)^ ({t, a, b)^) classical communication protocol is a [t;li, . . . , It]^ ([t; li, . . . , It]^) 
classical protocol, where assuming Alice (Bob) starts, li = a for i odd and li = bfor i even (U = bfor i odd 
and li = a for i even). A (t, c, a, b)^ ( (t, a, a, b)^) quantum communication protocol is a [t; c; /i, . . . , It]^ 
([t] c;li, . . . , h]^) safe quantum protocol, where assuming Alice (Bob) starts, li = a for i odd and li = bfor 
i even (li = bfor i odd and li = a for i even). 

Definition 7 (Rank parity) In the rank parity communication game PARp g, Alice is given a bit string x of 
length p. Bob is given a set S of bit strings of length p, \S\ < q, and they have to communicate and decide 
whether the rank of x in S (treating the bit strings as integers) is odd or even. By the rank of x in S, we 
mean the cardinality of the set {y ^ S \ y < x}. In the communication game PAR^^^'"^, Alice is given k bit 
strings xi, . . . , x^ each of length p. Bob is given a set S of bit strings of length p, \S\ < q, an index i £ [k], 
and copies o/xi , . . . , Xj_i; they have to communicate and decide whether the rank ofxi in S is odd or even. 
In the communication game PAR^^^'^, Alice is given a bit string x of length p and an index i € [k]. Bob is 
given k sets Si, . . . , Sk of bit strings of length p, \Sj\ < q,l < j < k; they have to communicate and decide 
whether the rank of x in Si is odd or even. 

Fact 1 Let mbe a positive integer such that m is a power of 2. Suppose that there is a (n^^^^ , (log m)^^^^ , t) 
randomised (address-only quantum) cell probe scheme for the {m,n)-static predecessor problem. Then 
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the rank parity communication game PARiogm.n has a {2t + 0(1), 0(log n), (log m)^^^^^ private coin 
randomised (safe coinless quantum) protocol. The error probability of the communication protocol is the 
same as that of the cell probe scheme. 

Proof: Consider the static rank parity data structure problem where the storage scheme has to store a set 
S C [m], \S\ < n, and the query scheme, given a query x G [m], has to decide whether the rank of x in 
S is odd or even. Fredman, Komlos and Szemeredi PFKS841 have shown the existence of two-level perfect 
hash tables containing, for each member y of the stored subset S, y's rank in S, and using 0{n) cells of 
word size O(logm) and requiring only 0(1) deterministic cell probes. Combining a (n ' i),(logm)'^(i),i) 
cell probe solution to the static predecessor problem with such a perfect hash table gives us a (n'^^^^ + 
0(n), max((logm)'^(^\ 0(log m)), t+0(l)) cell probe solution to the static rank parity problem. The error 
probability of the cell probe scheme for the rank parity problem is the same as the error probability of the cell 
probe scheme for the predecessor problem. Converting the cell probe scheme for the rank parity problem into 
a communication protocol by IMil94ll (by LemmaQ, we get a (2t + 0(1), 0(log n), (logm)*^^^))"^ private 
coin randomised (safe coinless quantum) protocol for the rank parity communication game PARiogm,n- 
The error probability of the communication protocol is the same as that of the cell probe scheme for the 
predecessor problem. ■ 



Fact 2 Let k,pbe positive integers such that k \ p. A communication protocol with Alice starting for PARp g 

p/k,q 



gives us a communication protocol with Alice starting for PAR*-^^'^ with the same message complexity, 



number of rounds and error probability. 

Proof: Consider the problem PAR^^]^"^. Alice, who is given xi, . . . , x^, computes the concatenation x = 
xi ■ X2 - • • x^. Bob, who is given S, i and xi, . . . , Xi-i, computes 



S^{xi-X2---Xi.i-y(f^'~'/'^ :yeS} 



^ ^ (k) A 

After this, Alice and Bob run the protocol for PARp g on inputs x, S to solve the problem PAR^^^' ^. ■ 

Fact 3 Let k,q be positive integers such that k \ q and k is a power of 2. A communication protocol with 
Bob starting for PARp g gives us a communication protocol with Bob starting for PAR^^^J^^ ^^ with the 
same message complexity, number of rounds and error probability. 

Proof: Consider the problem P^^^pli^gk-i q/f -^lice. who is given x and i, computes the concatenation 
a; = (i — 1) • • X. Bob, who is given Si, . . . ,Sk, computes the sets S'(, . . . , 5^ where 



f {0-i)-o-!/;!/eS.} 



if \Sj \ is even. 



{(j-l)-0-y:2/G5,}U{(j-l)-l^-^°^'} 



if \Sj \ is odd. 



Above, the integers (i — 1), {j — 1) are to be thought of as bit strings of length \ogk. Bob also com- 
putes S = Uf=i S'y Alice and Bob then run the protocol for PARp g on inputs x, S to solve the problem 

'p—\ogk—l,q/k' ^ 



pAR(fc),B 
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2.4 Some classical information theoretic facts 

In this subsection, we discuss some classical information theoretic facts which will be used in the proof of 
our improved classical round elimination lemma. For a good account of classical information theory, see 
the book by Cover and Thomas fCT91 1. 

In this paper, all random variables have finite range and all sample spaces have finite cardinality. Let 
X, Y, Z be random variables with some joint distribution. The Shannon entropy of X is defined as H{X) = 

— Yl,x Pr[-^ = 2;] log Pr[X = x\. The mutual information of X and Y is defined as I{X : Y) = H{X) + 
H{Y) - H{XY). If the range of X has cardinahty at most d, I{X : Y) < log d. I{X : y) = iff X and 
Y are independent. Let I{{X -.Y) \ Z = z) denote the mutual information of X and Y conditioned on the 
event Z = z. 

The next fact follows easily from the definitions. 

Fact 4 Let X, Y, Z be random variables with some joint distribution. Then, 

(a) I{XY : Z) = I{X : Z) + I{Y : ZX) - I{X : Y). In particular, if X,Y are independent 
I{XY : Z) = I{X : Z) + I{Y : ZX). 

(b) I{Y : ZX) = I{X : Y) + E[/((y : Z) \ X = x)], where is expectation is over the marginal 
distribution of X. 

We use total variation distance to quantify the distance between two probability distributions. 

Definition 8 (Total variation distance) Let P, Q be probability distributions on the same sample space fl. 
The total variation distance (also known as the li-distance) between P and Q, denoted by \\P — Q\\i, is 
defined as \\P — Q||i = ^ \P{x) — Q{x)\. 

We will need the average encoding theorem of Klauck, Nayak, Ta-Shma and Zuckerman IKNTZOII . 
Klauck et al. actually prove a quantum version of this theorem in their paper, but we will use the classical 
version in the proof of our round elimination lemma. Intuitively speaking, the theorem says that if the 
mutual information between a random variable and its randomised encoding is small, then the probability 
distributions on the code words for various values of the random variable are close to the average probability 
distribution on the code words. 

Fact 5 (Average encoding theorem, | KNTZOl |) Let X, M be correlated random variables. Let px denote 
the (marginal) probability that X = x, and li^ denote the conditional distribution of M given that X = x. 
Let n denote the (marginal) probability distribution of M i.e. 11 = '^^Px^^- Then, 

^p,||n^' - n||i < y^(21n2)/(X:M). 

X 

A self-contained classical proof, without using quantum information theory, of this fact can be found in the 
appendix for completeness. 

2.5 Some quantum information theoretic facts 

In this subsection, we discuss some quantum information theoretic facts which will be used in the proof of 
our quantum round eUmination lemma. For a good account of quantum information theory, see the book by 
Nielsen and Chuang INCOOI . 
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In this paper, all quantum systems, Hilbert spaces and superoperators are finite dimensional. Let X, Y 
be quantum systems with some joint density matrix pxY- If Px is the reduced density matrix of X, the 
von Neumann entropy of X is defined as S{X) = — Tr px log px- The mutual information of X and Y is 
defined as I{X : Y) = S{X) + S{Y) - SiXY). If X is at most d-dimensional, I{X : Y) < 21ogd. 
I{X : y) = iff X and Y are independent i.e. pxY = Px ® Py- Suppose X, Y, Z are quantum systems 
with some joint density matrix where Z is a. classical random variable i.e. the reduced density matrix of Z 
is diagonal in the computational basis. Let I{{X : Y) \ Z = z) denote the mutual information of X and Y 
conditioned on the event Z = z. 

The next fact follows easily from the definitions. 

Fact 6 Let X, Y, Z, W be quantum systems with some joint density matrix, where X and Y are classical 
random variables. Then, 

(a) I{XY : Z) = I{X : Z) + I{Y : ZX) - I{X : Y). In particular, if X,Y are independent 
I{XY : Z) = I{X : Z) + I{Y : ZX). 

(b) I{Y : ZX) = I{X : Y) + 'Ej[I{{Y : Z) \ X = x)], where is expectation is over the marginal 
distribution of X. 

(c) Suppose W is independent of X and Z is supported on m qubits. Then, I{X : ZW) < 2m. 
Remarks: 

1. Fact|6tc) is the key observation allowing us to "ignore" the size of the "safe" overhead W in quantum 
round elimination applications. In these applications, the complexity of the first message in the protocol 
increases quickly, but the blow up is confined to the "safe" overhead. Earlier round reduction arguments 
were unable to handle this large blow up in the complexity of the first message. 

2. In Fact|6tc), if Z is a classical random variable, we get the improved inequality I{X : ZW) < m. 
We use trace distance to quantify the distance between two density matrices. 

Definition 9 (Trace distance) Let p, a be density matrices in the same Hilbert space. The trace distance 
between p and a, denoted by ||p — cj||i, is defined a^' ||p — cr ||i = Tr \J {p — (y)^{p — c). 

If p is a density matrix in a Hilbert space Ti and is a general measurement i.e. a POVM on Ti, let 
M. p denote the probability distribution on the (classical) outcomes of M. got by performing measurement 
M. on p. The importance of the trace distance as a metric on density matrices stems from the following 
fundamental fact (see e.g. I.AKN98J ). 

Fact 7 Let pi , p2 be two density matrices in the same Hilbert space TC. Let M be a POVM on Ti. Then, 

\\Mpi - Mp2\\l < \\pi - P2\\l- 

Let Ti^lC be disjoint Hilbert spaces such that dim(/C) > dim('H). Let /? be a density matrix in Ti and 
IV') be a pure state mTi ® K. jV') is said to be a purification of /? if Tr = P- We will require the 

following basic fact about two purifications of the same density matrix. 

Fact 8 Let TC, fC be disjoint Hilbert spaces such that dim(/C) > dim('H). Let p be a density matrix in TC 
and \ip),\<j)) be two purifications of p in TC® IC. Then there is a local unitary transformation U on fC such 
that 1^) = (/ U)\(j)), where I is the identity operator on TC. 
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We now state an improved version of the quantum average encoding theorem of Klauck, Nayak, Ta- 
Shma and Zuckerman IKNTZOlll . This improved version follows from a direct connection between fidelity 
and relative entropy described in fDHR78|, and was also independently observed by Klauck (private com- 
munication). Intuitively speaking, the theorem says that if the mutual information between a random variable 
and its quantum encoding is small, then given any purifications of the quantum code words for various values 
of the random variable, one can find purifications of the average code word that are close to the respective 
purifications of the quantum code words. 

Fact 9 Let X, M be quantum systems with some joint density matrix. Let X be a classical random variable 
and Px denote the (marginal) probability that X = x. Let 7i denote the Hilbert space of M and denote 
the conditional density matrix of M given that X = x. Let p denote the reduced density matrix of M. 
Note that p = J2xPxP^- Let /C denote a disjoint Hilbert space such that dim(/C) > dimCH). Let 1-0^) be 
purifications of in TC <S> IC. Then there exist purifications of p in 7i ® IC such that 

E^'-IIIV'")(^1 - < v/(41n2)/(X:M). 

X 

A proof of this fact can be found in the appendix for completeness. 

3 Reducing the number of rounds 

In this section, we prove an intermediate result which will be required to prove our strong round elimination 
lemmas. In Section ITTl we prove the intermediate result in its classical version (Lemma IS, whereas in 
Section IT2I we prove the intermediate result in its quantum version (LemmalSj. The proof of Lemma|2lis 
similar to the proof of Lemma 4.4 in IKNTZOTl (see also IManOll '). but much simpler since we are in the 
classical setting. The proof of Lemma|3lis a slight refinement of the proof of Lemma 4.4 in r KNTZOlll . and 
is included here for completeness. Intuitively speaking, the intermediate result says that if the first message 
in a communication protocol carries little information about the sender's input, under some probability 
distribution on Alice's and Bob's inputs, then it can be eliminated, giving rise to a protocol where the other 
player starts, with one less round of communication, smaller message complexity, and with similar average 
error probability with respect to the same probability distribution on Alice's and Bob's inputs. 

Consider a communication protocol V computing a function f : X x y ^ Z. For an input (x, y) G 
^ X 3^, we define the error e^y of V on (x, y) to be the probabihty that the result of V on input (x, y) is not 
equal to /(x, y). For a protocol V, given a probability distribution D on X xy ,sn& define the average error 
of V with respect to D as the expectation over D of the error of V on inputs (x, y) ^ X xy. We define 
to be the maximum error of V on inputs {x^y) ^ X x y i.e. is the error of protocol V. 

3.1 Classical 

Lemma 2 Suppose f : X x y ^ Z is a function. Let D be a probability distribution on X x y, 
and V be a [t;li, . . . , It]^ private coin randomised protocol for f. Let X stand for the classical ran- 
dom variable denoting Alice's input, M stand for the random variable denoting the first message of Alice 
in V, and I{X : M) denote the mutual information between X and M when the inputs to V are dis- 
tributed according to D. Then there exists a [t — l;l2, . . . ,lt]^ deterministic protocol Qfor f, such that 
6g<6g + (l/2)((21n2)/(X:M))V2. 

Proof: We first give an overview of the idea of the proof before getting down to the details. The proof 
proceeds in stages. 
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Idea of Stage 1: Starting from protocol V, we construct a [t; /i, . . . , Z^]"^ private coin protocol V' where the 
first message is independent of Alice's input, and < + (l/2)((2 In 2)I{X : M))^/"^ . The important 
idea here is to first generate Alice's message using a new private coin without 'looking' at her input, and 
after that, to adjust Alice's old private coin in a suitable manner so as to be consistent with her message and 
input. 

Idea of Stage 2: Since the first message of V' is independent of Alice's input. Bob can generate it himself. 
Doing this and setting coin tosses appropriately gives us a [t — 1; ^2, • • • , ^t]^ deterministic protocol Q for / 
such that eg < e^' < eg + (l/2)((2 In 2)/(X : M))V2. 

We now give the details of the proof. Let W be the probability distribution of the first message M 
of protocol V when Ahce's input X = x. Define 11 = dx^^, where dx is the marginal probability 
oi X = X under distribution D. 11 is the probabiUty distribution of the average first message of V under 
distribution D. For x £ X and an instance m of the first message of Alice, let qf"^ denote the conditional 
probability that the private coin toss of Alice results in r, given that Alice's input is x and her first message 

in V is m. If in V message m cannot occur when Alice's input is x, then we define qf"'' = 0. Let tt^ 
denote the probability that the first message of Alice in 'P is m, given that her input is x. Let tt^ denote the 
probability that the first message of Alice in V is m, when Alice's and Bob's inputs are distributed according 
to D. Then, -Km = T,x dxi^m- 

Stage 1: We construct & \t\li, . . . ,lt]^ private coin randomised protocol V' for / with average error under 
distribution D eg' < eg + (l/2)((2 In 2)I{X : M)) and where the probability distribution of the first 
message is independent of the input to Alice. We now describe the protocol V'. Suppose Alice is given 
X & X and Bob is given y G y. Alice tosses a fresh private coin to pick m with probability vr^ and set her 
old private coin to r with probability q^"^. After this, Ahce and Bob behave as in protocol V (henceforth, 
Alice ignores the new private coin which she had tossed to generate her first message m). Hence in V the 
probability distribution of the first message is independent of Alice's input. 

Let us now compare the situations in protocols V and V' when Alice's input is x, Bob's input is y, Alice 
has finished tossing her private coins (both old and new), but no communication has taken place as yet. 
In protocol V, the probabiUty that Ahce's private coin toss results in r is J2m T^mQr"^- ^ protocol T", the 
probability that Alice's old private coin is set to r is J2m '^mlr"^- Thus, the total variation distance between 
the probabihty distributions on Ahce's old private coin is 



E 



Qr y^m - 



< 




Hence, the error probability of V on input x , y e^'y < e^^ + ( 1/2) 1 1 11^ — 11 1 1 1 . Let dxy be the probability 
that {X, Y) = {x, y) under distribution D. Then, the average error of V' under distribution D 

— 2-^ ^xy^x,y 



x,y 
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x,y 



2 . 



< el + \{{2\n2)I{X:M)f/\ 



The last inequality follows from Fact|5l 



Stage 2: We now construct our desired [t — 1; ^2, • • • , ^t]^ deterministic protocol Q for / with e§ < e^'. 
Suppose all the coin tosses of Alice and Bob in V' are done publicly before any communication takes place. 
Now there is no need for the first message from Alice to Bob, because Bob can reconstruct the message 
by looking at the public coin tosses. This gives us a [t — 1; Z2, • • • , ^t]^ public coin protocol Q' such that 
e^y = e^y for every {x, y) G A" x 3^. By setting the public coin tosses of Q' to an appropriate value, we get a 
[i - 1; /2, • • • , kf deterministic protocol Q such that eg < eg' = eg' < eg + (l/2)((2 In 2)I{X : M))^/^ 
This completes the proof of Lemma|2 ■ 



3.2 Quantum 

Lemma 3 Suppose f : X x y ^ Z is a Junction. Let D be a probability distribution on X x y, and 
V be a [t; c; /i, . . . , lt\^ safe coinless quantum protocol for f. Let X stand for the classical random vari- 
able denoting Alice's input, M denote the first message of Alice in V, and I{X : M) denote the mutual 
information between X and M when the inputs to V are distributed according to D. Then there exists a 
[t — \]c + hih, • • • , k]^ safe coinless quantum protocol Qfor f, such that eg < eg + (l/2)((41n 2)I{X : 
M)f/\ 

Proof: We first give an overview of the plan of the proof, before getting down to the details. The proof 
proceeds in stages. Stage 1 of the quantum proof corresponds to Stage 1 of the classical proof, and Stages 2A 
and 2B of the quantum proof together correspond to Stage 2 of the classical proof. 



Idea of Stage 1: Starting from protocol V, we construct a [t; c; /i , . . . , It]^ safe coinless quantum protocol 
V' where the first message is independent of Alice's input, and eg' < eg + (l/2)((41n 2)/(X : M))^/^. 
The important idea here is to generate a purification of the average first message p of Alice in V that is 
close to the purification 1-0^) of the message of Alice in V when her input is x. The existence of such a 
purification is guaranteed by Fact|9l 



Idea of Stage 2A: Since the first message of V' is independent of Alice's input (in fact its density matrix 
is p), Bob can generate it himself. This suffices if V' is a one-round protocol, and completes the proof of 
Lemma |3l for such protocols. But if V' has more than one round, it is also necessary for Bob to achieve 
the correct entanglement between Alice's work qubits and the first message i.e. it is necessary that the joint 
state of Alice's work qubits and the qubits of the first message be \<j)^). Bob achieves this by first sending 
a safe message of /i + c qubits. If Alice's input is x, she then applies a unitary transformation Vx on her 
work qubits in order to make the joint state of her work qubits and the qubits of the first message The 
existence of such a Vx follows from Fact[8] Doing all this gives us a [t + 1; c + /i; 0, 0, /2, • • • , h]^ safe 
coinless quantum protocol Q! for / such that e^y = e^^^ for every {x,y) ^ X xy. 
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Idea of Stage 2B: Since the first message of Alice in Q! is zero qubits long, Bob can concatenate Ms 
first two messages, giving us a [t — 1; c + /i; /2, • • • , ^t]^ safe coinless quantum protocol Q for / such that 
e^y = e'^y for every (x, y) ^ X y. The technical reason behind this is that unitary transformations on 

disjoint sets of qubits commute. Note that eg = eg' = eg' < eg + (l/2)((41n 2)I{X : M))^/^. 

We now give the details of the proof. Let be the density matrix of the first message M of protocol 
V when Alice's input X = x. Let A and B denote Alice's work qubits excluding the qubits of M and 
Bob's work qubits respectively. Let \'4)^)am be the joint pure state of AM in V when Alice's input X = x, 
she has finished preparing her first message, but no communication has taken place as yet. Without loss of 
generality, the number of qubits in A is at least the number of qubits in M. Define p = J2xPxP^^ where 
Px is the marginal probability of X = x under distribution D. p is the density matrix of the average first 
message of V under distribution D. 

Stage 1: We construct a [t; c; /i , . . . , k]^ safe coinless quantum protocol V' for / with average error under 
distribution -D eg < eg + (1/2) ((4 In 2)I{X : Af))^/^, and where the density matrix of the first message 
is independent of the input x to Alice. We now describe the protocol V. Suppose Alice is given x ^ X and 
Bob is given y £ y. The qubits of AM are initialised to zero. Alice applies a unitary transformation [/^ 
on AM in order to prepare a purification \(p^) of p. She then sends the qubits of M as her first message to 
Bob. After this, Alice and Bob behave as in protocol V. Hence in V' the density matrix of the first message 
is independent of Alice's input. 

Let us now compare the situation in protocols V and V when Alice's input is x, Bob's input is y, Alice 
has finished preparing the state \(p^), but no communication has taken place as yet. In protocol V, the state 
of AMB at this point in time is am\(^) B ■ In protocol V', the state of AMB at this point in time is 
|<^'^)^m|0)s- Hence, e%y < e^^y + (1/2)|||V'^)('(A^| - |(/)^)((/.^| ||i. Let denote the probability that 
(X, Y) = (x, y) under distribution D. Then, the average error of V' under distribution D 

J" _ 

— 
< 



< 

The last inequality follows by taking {(p^) to be the purifications promised by Fact|9l 

Stage 2A: We now construct a [t + l;c + li;0,0,l2, ■ ■ ■ , k]^ safe coinless quantum protocol Q' for / 
with e^y = e^y, for all (x, y) £ X y< y. Suppose Alice is given x £ X and Bob is given y £ y. Let Ai 
denote all the qubits of A, except the last li + c qubits. Let A2 denote the last li + c qubits of A. Thus, 
A = A1A2. In protocol Q' , Alice initially starts with work qubits Ai only, and Bob initially starts with 
work qubits BMA2. The work qubits of Alice and Bob are initialised to zero. Bob commences protocol 
Q' by constructing a canonical purification |r/) MA2 of P> where the reduced density matrix of M is p. Bob 
then sends A2 to Alice. The density matrix of A2 is independent of the inputs x, y (in fact, if \r])MA2 is the 
Schmidt purification then the reduced density matrix of A2 is also p). After receiving A2, Alice applies a 
unitary transformation on ^ so that the state vector of AM becomes \(P^)am- The existence of such a 



T.i^y (^ly + l\\\r)m-\r)m\\i 

x,y ^ 



eg + i((41n2)/(X:M))V2 
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Vx follows from Fact[8l The global state of Alice's and Bob's qubits at this point in protocol Q' is the same 
as the global state of Alice's and Bob's qubits at the point in protocol V' just after Alice has sent her first 
message to Bob. Bob now treats M as if it were the first message of Alice in V', and proceeds to compute 
his response N (the qubits of are a subset of the qubits of MB) of length /2- Bob sends N to Alice and 
after this protocol Q' proceeds as protocol V'. In Q' Bob starts the communication, the communication goes 
on for t + 1 rounds, the first message of Bob of length li + c viz. A2 is a safe message, and the first message 
of Alice is zero qubits long. 

Stage 2B: We finally construct our desired [t — 1; c + /i; ^2, • • • 1 k]^ safe coinless quantum protocol Q for 
/ with e^y = e^y, for all {x,y) X x y. In protocol Q Bob, after doing the same computations as in Q', 
first sends as a single message the (/i + c) + I2 qubits A2N. After receiving A2N, Alice applies Vx on A 
followed by her appropriate unitary transformation on AN viz. the unitary transformation of Alice in Q' on 
the qubits of AN after she has received the first two messages of Bob. The global state of all the qubits of 
Alice and Bob at this point in protocol Q is the same as the global state of all the qubits of Alice and Bob at 
the point in protocol Q' just after Alice has finished generating her second message but before she has sent 
it to Bob. This is because unitary transformations on disjoint sets of qubits commute. After this, protocol Q 
proceeds as protocol Q'. In protocol Q Bob starts the communication, the communication goes on for t — 1 
rounds, and the first message of Bob of length (/i + c) + I2 viz. A2N contains a safe overhead viz. A2 of 
li + c qubits. 

This completes the proof of Lemma|3] ■ 

Remark: The proof of Lemma |3] requires the global state of all the qubits of Alice and Bob to be pure 
at all times during the execution of protocol V, when Alice's and Bob's inputs are in computational basis 
states. This is because we use the machinery of purifications in the proof. The proof also ensures that the 
purity property holds for the final protocol Q. 

4 The round elimination lemma 

We now prove the classical and quantum versions of our strong round elimination lemma in Sections 14.11 
and respectively. The round elimination lemma is stated for public coin protocols only. Since a public 
coin classical randomised protocol can be converted to a private coin classical randomised protocol at the 
expense of an additive increase in the communication complexity by at most logarithm of the total bit size 
of the inputs fNewQll, we also get a similar round elimination lemma for private coin classical randomised 
protocols. A similar statement about round elimination can be made for safe coinless quantum protocols; 
for such protocols the safe overhead increases by an additional additive term that is at most logarithm of the 
total bit size of the inputs. But since the statement of the round elimination lemma is cleanest for public 
coin protocols, we give it below for such protocols only. 

4.1 Classical 

Lemma 4 (Round elimination lemma, classical version) Suppose f : X x y ^ Z is a function. Suppose 
the communication game /(")'"^ has a [t;li, . . . , It]"^ public coin randomised protocol with error less than 

5. Then there is a \t — l;l2, ■ ■ ■ ih]^ public coin randomised protocol for f with error less than e = 
(5+ (l/2)(2/i ln2/n)i/2. 
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Proof: Suppose the given protocol for /("^'"^ has error 5 < 6. Define e = ^+(l/2)(2/i ln2/n)^/^. Toprove 
the round elimination lemma it suffices to give, by the harder direction of Yao's minimax lemma IIYao77l . for 
any probability distribution D on X xy, a[t—l;l2, ... ,lt]^ deterministic protocol V for / with < e < e. 
To this end, we will first construct a probability distribution D* on A'" x [n] x as follows: Choose i G [n] 
uniformly at random. Choose independently, for each j G [n], {xj,yj) ^ X x y according to distribution 
D. Set y = yi and throw away yj,j ^ i. By the easier direction of Yao's minimax lemma, we get a 
[t]li,. . . , It]^ deterministic protocol V* for /(")'^ with e^t <5<5.\n V* , Ahce gets xi,. . . ,Xn G X, 
Bob gets i G [re], y G 3^ and copies of 2:1, ... , We shall construct the desired protocol V from the 
protocol V*. 

In V* , let Alice's and Bob's inputs be distributed according to D* . Let the input to Alice be denoted 
by the random variable X = Xi ■ ■ ■ Xn, where Xi is the random variable corresponding to the ith input to 
Alice. Let the random variables Y, X correspond to the inputs y , i respectively of Bob. Let M denote the ran- 
dom variable corresponding to the first message of Alice in V* . Define probability distribution D*.^^ 
on X''^ X [n] X 3^ to be the distribution conditioned on X = i and Xi, . . . , Xi^\ = xi, . . . , xi-i. De- 
fine probability distribution Dly.^_^ ^_ on X"- x [n] x 3^ to be the distribution D* conditioned on X = i, 
Y = y and Xi,. . . ,Xi Let egt.j.^^ ^ denote the average error of V* under distribution 

^ixi Xi-i- Using Fact |4] and the fact that under distribution D* Xi,. . . ,Xn are independent random 
variables, we get that 



1 



l)] 



E [I{Xi 

I(X:M) 



< 



n ' 



Also, 



~5 > ei: 



E 

i,X 



■p* 



i',xi, 



(1) 



(2) 



Above, the expectations are under distribution D* and the mutual informations are for protocol V* with its 
inputs distributed according to D*. 

For any i G [n], xi, . . . , Xi^i G X, let us now define the [t;li, . . . , k]^ private coin randomised protocol 
"P- ^ for the function / in terms of protocol V* as follows: Alice is given x G A" and Bob is given 
y ^ y. Bob sets Z = i, and both Alice and Bob set Xi, . . . , = xi, . . . , Alice tosses a fresh 
private coin to choose Xi^i , . . . , X„ G X, where each Xj,i + 1 < j < nis chosen independently according 
to the marginal distribution on X induced by D. Alice sets Xi = x and Bob sets Y = y. They then run 

Kx 

protocol V* on these inputs. The probability that V^^^ makes an error for an input (x, y), e^'y"^^ "^'"^ , 

is the average probability of error of V* under distribution D*.y.^_^ Hence, the average probability of 
error of V-.^ „ under distribution D, 



V 



i;x\,. 



(3) 



Let M' denote the random variable corresponding to Alice's first message and X' denote the random variable 
Xi, when Alice's and Bob's inputs are distributed according to D in V'.^ ^ . Then 



liiXi ■.M)\Xi 



, Xi 



Xl, 



,Xi.i) = I{X' -.M'), 



(4) 



where the left hand side refers to the mutual information in protocol V* when its inputs are distributed 



according to D* and the right hand side refers to the mutual information in protocol Vi-^^ 
inputs are distributed according to D. 



when its 
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Using Lemma|2land equations ^ and (|4]i, we get a [t — 1; Z2, • • • , k]^ deterministic protocol Vi;xi,...,xi-i 
for / with 



^1 jX^,... 



= + ^ ((2 In 2)/((X, : M) | Xi, . . .,X,^, = x^, . . . 



We have that (note that the expectations below are under distribution D* and the mutual informations are 
for protocol V* with its inputs distributed according to D*) 



E 

i,x 



; a: ]^ , . . , 

-D 



< E 

i,X 



^D*:i:xi,...,Xi 



+ 



1 

2 5 



< E 



((21n2)/((X, :M)\Xi,.. . = xi, . . . 

\ 1/2 



- (^(21n2) ^E[/((X, :M) | Xi, . . . , X^.i = xi, . . . , 
2 V n 



The first inequality follows from the second inequality follows from the concavity of the square root 
function and the last inequality from Q and 

Thus, we can immediately see that there exist i G [n] and xi, . . . , Xi^i G X such that 

Let "P = 'Pj;a;i,...,a;,;_i- V IS our dcsircd [t — 1; • • • 1 k]^ deterministic protocol for / with < e, thus 
completing the proof of the round elimination lemma. ■ 



'Pi;xi,...,xi_i ^ _ 



4.2 Quantum 

Lemma 5 (Round elimination lemma, quantum version) Suppose f : Xxy ^ Zis a function. Suppose 
the communication game /(")'^ has a [t; c; /i, . . . , lt\-^ safe public coin quantum protocol with error less 
than 6. Then there is a [t — 1; c + /i; • • • j ^t]^ safe public coin quantum protocol for f with error less 
than e = 6 + (l/2)(8/i ln2/n)i/2. 

Proof: (Sketch) The proof is very similar to the proof of Lemma |4] We just point out some important 
things below. Note that in the quantum setting, the upper bound in Q is ^ by Fact |6tc). Also, in the 
definition of protocol V^.^^ instead of feeding probabilistic mixtures for the inputs Xj+i, . . . ,X„, 

Alice feeds appropriate pure states (pure states that would give the correct probabilistic mixture were they to 
be measured in the computational basis). Equations |3] and 0] continue to hold because protocol V* is secure. 
Since the global state of all the qubits of Alice and Bob is pure at all times during the execution of protocol 
^i xi when Alice's and Bob's inputs are in computational basis states, Lemma|3]can now be used to 

get the — 1; c + /i; /2, • • • , k]^ safe coinless quantum protocol Vi-xi,...,x^^i for /. ■ 
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5 Optimal lower bounds for predecessor 

In this section, we prove our (optimal) lower bounds on the query complexity of static predecessor searching 
in the cell probe model with randomised or address-only quantum query schemes. 

Theorem 1 Suppose there is a {'nP^^\ (log m)'^(^\ t) randomised cell probe scheme for the {m,n)-static 
predecessor problem with error probability less than 1 /3. Then, 

^ = ^ ( log log lo^"^ ) ^'^ a function of m; 

(b) t = Q (y^ log fog n ) a function of n. 

The same lower bound also holds for address-only quantum cell probe schemes for static predecessor 
searching. 

Proof: The proof is similar to the proof of the lower bound for predecessor in |^NSW98 1, but with different 
parameters, and using our stronger round elimination lemma in its classical version (Lemma|3. 

By Fact ^ it suffices to consider communication protocols for the rank parity communication game 
PARiogm.n- Let n = 2(i°si°g"^)Viogiogiogm_ A ^2 2)62. For any given constants C2, C3 > 1, define 

a = C2 log n b = (log mY^ 

^ A log log m 

(ci + C2 + C3) log log log m 

We will show that PARiogm.n does not have (2t, a, 6)"^ public coin randomised communication protocols 
with error less than 1/3, thus proving both the desired lower bounds for the predecessor problem. 

Given a {2t, a, h)^ public coin protocol for PARiogm,n with error probability at most 5, we can get a 
(2t, a, h)^ public coin protocol for PAR*i^gm '^'^ with error probability at most 5 by Fact|2l Using Lemma|3 

we get a (2t — 1, o, b)^ public coin protocol for PAR iogm , but the error probability increases to at most 
5 + (12t)-^ By Factm we get a (2t - 1, a, 6)^ public coin protocol for PAR'^i;;'^^^^^ ( h^^- " 
error probability at most 6 + (12t)^^. From the given values of the parameters, we see that (J°^JIiy > 
log(ci6t2) -|- 1_ This implies that we also have a (2t — 1, a, b)^ public coin protocol for P/^R^'^oglrJ'^ „ with 

error probability at most 6 + (12t)~^. Using Lemma |3] again, we get a {2t — 2, a, b)"^ public coin protocol 
for PAR log m n , but the error probability increases to at most 5 + 2(12t) . 

We do the above steps repeatedly. We start off with a {2t, a, b)^ public coin protocol for PARiogm,n 
with error probability less than 1/3. After applying the above steps i times, we get a (2t — 2i, a, b)^ public 
coin protocol for PAR logm „ with error probabihty less than 1/3 + 2i{12t)~^. 

By applying the above steps t times, we finally get a (0, a, 6)^ public coin randomised protocol for the 
problem PAR _iog7n „ with error probability less than 1/3 + 2t(12t)~^ = 1/2. From the given values 

of the parameters, we see that (^2ciat^y — {^ogni)^^^'> and (^^^^^-ly > n^^^\ Thus, we get a zero round 
protocol for a rank parity problem on a non-trivial domain with error probability less than 1/2, which is a 
contradiction. 
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In the above proof, we are tacitly ignoring "rounding off" problems. We remark that this does not affect 
the correctness of the proof. 

Finally we observe that by using Lemma|3j one can prove that the same lower bound holds for address- 
only quantum cell probe schemes for static predecessor. ■ 

6 The 'greater- than' problem 

We illustrate another application of the round elimination lemma to communication complexity by proving 
improved rounds versus communication tradeoffs for the 'greater- than' problem. 

Theorem 2 The bounded error public coin randomised t-round communication complexity ofGTn is lower 
bounded by 0,{n^^^t~'^). For bounded error quantum protocols with input-independent prior entanglement 
for GT n, we have a lower bound of Q[n^^^t ^). 

Proof: We recall the following reduction from GtJJ^/ to GT„ (see |MNSW98|): In Gljf/^^^, Alice is 
given xi, . . . ,Xk € {0, 1}"/'^, Bob is given i G [k], y G {0, l}"/'^', and copies of xi, . . . , and they 
have to communicate and decide if Xj > y. To reduce GT^^'^^^^^ to GT„, Alice constructs x G {0, 1}" by 
concatenating xi, . . . , Xk, Bob constructs y G {0, 1}" by concatenating xi, . . . , y, i^C^-^/i^) _ it is easy 
to see that x > y iff Xj > y. 

Suppose there is a t-round bounded error public coin randomised protocol for GT„ with communication 
complexity c. We can think of the protocol as a (t, c, c)^ public coin randomised protocol with error proba- 
bility less than 1/3. Suppose n > k^, where k = (2 In 2)(3t)^c. Applying the self-reduction and Lemma|4] 
alternately for t stages gives us a zero round protocol for the 'greater-than' problem on a non-trivial domain 
with error probability less than 1/2, which is a contradiction. Thus, c = r2(n^/*t~^). 

In the above proof, we are tacitly ignoring "rounding off" problems. We remark that this does not affect 
the correctness of the proof. 

Finally, we observe that for bounded error quantum protocols with input-independent prior entanglement 
for GT„, one can improve the lower bound to Q{n^^^t^^) by exploiting the fact that by definition, a quantum 
protocol sends fixed length messages independent of the input. ■ 

7 Conclusion and open problems 

In this paper, we proved a lower bound for the randomised and address-only quantum query complexity of 
a cell probe scheme for the static predecessor searching problem. Our lower bound matches the determin- 
istic cell probe upper bound of Beame and Fich. We proved our lower bound by proving a strong round 
elimination lemma in communication complexity. Our round elimination lemma improves on the round 
elimination lemma of Miltersen, Nisan, Safra and Wigderson, and is crucial to proving our optimal lower 
bound for predecessor searching. Our strong round elimination lemma also gives us improved rounds versus 
communication tradeoffs for the 'greater-than' problem. We believe that our round elimination lemma is 
of independent interest and should have other applications. In fact recently, Chakrabarti and Regev |CR03| 
have proved an optimal lower bound for randomised cell probe schemes for the approximate nearest neigh- 
bour searching problem on the Hamming cube {0, l}'^. Their proof uses the classical version of our round 
elimination lemma and combines it with a message switching argument, drawing on the message com- 
pression ideas of Jain, Radhakrishnan and Sen IJRS03I . for classical communication protocols that further 
exploits the asymmetry in the message lengths of Alice of Bob. 
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We believe that our work brings out an interesting fact. Sometimes, in order to prove lower bound 
results, it helps to work in a more general model of computation. Of course, this makes the task of proving 
lower bounds harder, but also we now have more tools and techniques at our disposal. This sometimes 
enables us to attack the problem in a clearer fashion, without letting irrelevant details about the restricted 
model distract us. In our case, our attempt to prove a lower bound result in the more general address-only 
quantum cell probe model led us to make better use of powerful tools from information theory, which finally 
enabled us to prove optimal lower bounds for predecessor in the randomised cell probe model! Also, the 
information-theoretic approach gives us a simpler and clearer lower bound proof as compared to previous 
lower bound proofs for predecessor. 

The lower bound for predecessor searching for quantum cell probe schemes works only if the query 
scheme is address-only. If the query scheme is not address-only, the asymmetry in the message lengths of 
Alice and Bob in the corresponding quantum communication protocol breaks down. For a general quantum 
query scheme, it is an open problem to prove non-trivial lower bounds for static data structure problems. 

The message switching idea of Chakrabarti and Regev |CR03 | works for classical communication pro- 
tocols only. Thus, their lower bound for approximate nearest neighbour searching on the Hamming cube 
holds for classical cell probe schemes only. Our round elimination lemma alone does not seem to be able to 
fully exploit the asymmetry in the message lengths of Alice and Bob in a communication protocol for this 
problem. Proving a non-trivial lower bound for this problem in the address-only quantum cell probe model 
remains an open problem. 

Acknowledgements 

We thank Rahul Jain, Hartmut Klauck and Peter Bro Miltersen for helpful discussions and feedback, and 
Amit Chakrabarti for sending us a copy of |CR03 1. We also thank Ashwin Nayak for helpful discussions and 
for pointing out the reference IManOl I . and Jaikumar Radhakrishnan for reading an early draft of LSV01.I 
and for enlightening discussions. 

References 

[Ajt88] M. Ajtai. A lower bound for finding predecessors in Yao's cell probe model. Combinatorica, 
8(3):235-247, 1988. 

[AKN98] D. Aharonov, A. Kitaev, and N. Nisan. Quantum circuits with mixed states. In Proceedings of 
the 30th Annual ACM Symposium on Theory of Computing, pages 20-30, 1998. Also quant- 
ph/9806029. 

[And96] A. Andersson. Faster deterministic sorting and searching in linear space. In Proceedings of the 
37th Annual IEEE Symposium on Foundations of Computer Science, pages 135-141, 1996. 

[BF99] P. Beame and F. Fich. Optimal bounds for the predecessor problem. In Proceedings of the 31st 
Annual ACM Symposium on Theory of Computing, pages 295-304, 1999. 

[BMRVOO] H. Buhrman, P. B. Miltersen, J. Radhakrishnan, and S. Venkatesh. Are bitvectors optimal? In 
Proceedings of the 32nd Annual ACM Symposium on Theory of Computing, pages 449^58, 
2000. 



22 



[CR03] A. Chakrabarti and O. Regev. An optimal randomised cell probe lower bound for approximate 
nearest neighbour searching. Unpublished manuscript, 2003. 

[CT91] T. Cover and J. Thomas. Elements of Information Theory. Wiley Series in Telecommunica- 
tions. John Wiley and Sons, 1991. 

[CvDNT98] R. Cleve, Wim van Dam, M. Nielsen, and A. Tapp. Quantum entanglement and the communi- 
cation complexity of the inner product function. In Proceedings of the 1st NASA International 
Conference on Quantum Computing and Quantum Communications, Lecture Notes in Com- 
puter Science, vol. 1509, pages 61-74. Springer- Verlag, 1998. Also quant-ph/9708019. 

[DHR78] D. Dacunha-Castelle, H. Heyer, and B. Roynette. Ecole d'Ete de Probabilites de Saint-Flour 
VII. Lecture Notes in Mathematics, vol. 678. Springer- Verlag, 1978. 

[FC95] C. Fuchs and C. Caves. Mathematical techniques for quantum communication theory. Open 
Systems and Information Dynamics, 3(3):345-356, 1995. Also quant-ph/9604001. 

[FGGS99] E. Farhi, J. Goldstone, S. Gutmann, and M. Sipser. Invariant quantum algorithms for insertion 
into an ordered Ust. Manuscript at quant-ph/9901059, January 1999. 

[FKS84] M. Fredman, J. Komlos, and E. Szemeredi. Storing a sparse table with 0(1) worst case access 
time. Journal of the Association for Computing Machinery, 31(3):538-544, 1984. 

[FW93] M. Fredman and D. Willard. Surpassing the information theoretic bound with fusion trees. 
Journal of Computer and System Sciences, 47:424—436, 1993. 

[Gro96] L. Grover. A fast quantum mechanical algorithm for database search. In Proceedings of the 
28th Annual ACM Symposium on Theory of Computing, pages 212-219, 1996. Also quant- 
ph/9605043. 

[HNS02] R H0yer, J. Neerbek, and Y. Shi. Quantum complexities of ordered searching, sorting, and 
element distinctness. Algorithmica, 34(4):429^8, 2002. Also quant-ph/0I02078. 

[IM98] P. Indyk and R. Motwani. Approximate nearest neighbors: Towards removing the curse of 
dimensionality. In Proceedings of the 30th Annual ACM Symposium on Theory of Computing, 
pages 604-613, 1998. 

[Joz94] R. Jozsa. Fidehty for mixed quantum states. Journal of Modern Optics, 4I(I2):23I5-2323, 
1994. 

[JRS03] R. Jain, J. Radhakrishnan, and R Sen. A direct sum theorem in communication complexity 
via message compression. In Proceedings of the 30th International Colloquium on Automata, 
Languages and Programming, Lecture Notes in Computer Science, vol. 2719, pages 300-315. 
Springer- Verlag, 2003. Also cs.CC/0304020. 

[KlaOO] H. Klauck. Quantum communication complexity. In Proceedings of the Satellite Workshops 

at the 27th International Colloquium on Automata, Languages and Programming, Workshop 
on Boolean Functions and Applications (invited lecture), pages 241-252. Carleton Scientific, 
Waterloo, Ontario, Canada, 2000. Also quant-ph/0005032. 

[KN97] E. Kushilevitz and N. Nisan. Communication complexity. Cambridge University Press, 1997. 



23 



[KNTZOl] H. Klauck, A. Nayak, Amnon Ta-Shma, and D. Zuckerman. Interaction in quantum com- 
munication and the complexity of set disjointness. In Proceedings of the 33rd Annual ACM 
Symposium on Theory of Computing, pages 124-133, 2001. 

[KOR98] E. Kushilevitz, R. Ostrovsky, and Y. Rabani. Efficient search for approximate nearest neighbor 
in high-dimensional spaces. In Proceedings of the 30th Annual ACM Symposium on Theory of 
Computing, pages 614—623, 1998. 

[Kre95] I. Kremer. Quantum communication. Master's thesis, Hebrew University, 1995. 

[Liu03] D. Liu. A strong lower bound for approximate nearest neighbor searching in the cell probe 
model. Unpublished manuscript, 2003. 

[ManOI] E. Maneva. Interactive communication on noisy channels. Bachelor's thesis, California Insti- 
tute of Technology, 2001. Available at http://www.cs.berkeley.edu/~elitza/resume.html. 

[Mil94] R B. Miltersen. Lower bounds for union-split-find related problems on random access ma- 
chines. In Proceedings of the 26th Annual ACM Symposium on Theory of Computing, pages 
625-634, 1994. 

[MNSW98] P. Bro Miltersen, Noam Nisan, S. Safra, and A. Wigderson. On data structures and asymmetric 
communication complexity. Journal of Computer and System Sciences, 57(1):37^9, 1998. 

[NCOO] M. Nielsen and I. Chuang. Quantum Computation and Quantum Information. Cambridge 
University Press, 2000. 

[New91] I. Newman. Private vs common random bits in communication complexity. Information Pro- 
cessing Letters, 39:67-71, 1991. 

[Nis93] N. Nisan. The communication complexity of threshold gates. In Combinatorics, Paul Erdos is 
Eighty (Vol. 1), pages 301-315. Janos Bolyai Mathematical Society, Budapest, Hungary, 1993. 

[Sen03] P. Sen. Lower bounds for predecessor searching in the cell probe model. In Proceedings of the 
18th Annual IEEE Conference on Computational Complexity, pages 73-83, 2003. 

[Smi88] D. Smimov. Shannon's information methods for lower bounds for probabihstic communication 
complexity. Master's thesis, Moscow University, 1988. 

[SVOl] P. Sen and S. Venkatesh. Lower bounds in the quantum cell probe model. In Proceedings of the 
28th International Colloquium on Automata, Languages and Programming, Lecture Notes in 
Computer Science, vol. 2076, pages 358-369. Springer- Verlag, 2001. Also quant-ph/0104100. 

[vEB77] P. van Emde Boas. Preserving order in a forest in less than logarithmic time and linear space. 
Information Processing Letters, 6:80-82, 1977. 

[vEBKZ77] P. van Emde Boas, R. Kaas, and E. Zijlstra. Design and implementation of an efficient priority 
queue. Mathematical Systems Theory, 10:99-127, 1977. 

[WiI85] D. Willard. Log-logarithmic worst case range queries are possible in space 6{n). Information 
Processing Letters, 17:81-84, 1985. 



24 



[Xia92] 



B. Xiao. New bounds in cell probe model. PhD thesis, University of California at San Diego, 
1992. 



[Yao77] A. C-C. Yao. Probabilistic computations: Towards a unified measure of complexity. In Pro- 
ceedings of the 18th Annual IEEE Symposium on Foundations of Computer Science, pages 
222-227, 1977. 

[Yao81] A. C-C. Yao. Should tables be sorted? Journal of the Association for Computing Machinery, 
28(3):615-628, 1981. 

[Yao93] A. Yao. Quantum circuit complexity. In Proceedings of the 34th Annual IEEE Symposium on 
Foundations of Computer Science, pages 352-361, 1993. 



A The average encoding theorem 
A.l Classical 

In this subsection, we give a self-contained classical proof, without using quantum information theory, of 
Fact|5] We first recall the definition of a classical information-theoretic quantity called relative entropy, also 
known as Kullback-Leibler divergence. 

Definition 10 (Relative entropy) Let P and Q be probability distributions on the same sample space Q. 
The relative entropy between P and Q is defined as 

S(P||Q)^^P(x)log 

We now require a non-trivial fact from classical information theory, which upper bounds the total vari- 
ation distance of a pair of probability distributions in terms of their relative entropy. A proof of the fact can 
be found in ICT911 Lemma 12.6.1]. 

Fact 10 Let P and Q be probability distributions on the same finite sample space 0,. Then, 

\\P-Q\\i<^J{2ln2)S{P\\Q). 

We can now prove Fact|5] 

Fact m (Average encoding theorem, classical version) Let X, M be correlated random variables. Let px 
denote the (marginal) probability that X = x, and denote the conditional distribution of M given that 
X = X. Let n denote the (marginal) probability distribution of M i.e. H = J2xPx^^- Then, 

^Px\\n^ - n||i < ^(21n2)/(X :M). 

X 

Proof: Let A", Ai be the finite ranges of random variables X, M respectively. We define two probability 
distributions P, Q on X x M.. In distribution P, the probability of {x,m) £ X x M is px • vr^, where 
vr^ is the conditional probability that M = m given that X = x. In distribution Q, the probability of 
{x,m) & X X M is Px ■ TTm, where vTm is the (marginal) probability that M = m i.e. iTm = J^xPx^^m- 

It is easy to check that S{P\\Q) = I{X : M) and ||P - Q||i = Y.xPx\\^x - n||i. The result now 
follows by applying FactfTOlto P and Q. ■ 
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A.2 Quantum 

In this subsection, we give a proof of Fact|51 We first recall some basic definitions and facts from quantum 
information theory. Let p and a be density matrices in the same finite dimensional Hilbert space Ti. The 
fidelity (also called Uhlmann's transition probability or the Bhattacharya coefficient) of p and a is defined 

as B{p,a) = llypv^lli- The von Neumann relative entropy between p and a is defined as ^(pllcj) = 
Tr {p{log p -log a)). 

Jozsa IJoz94l gave an elementary proof for finite dimensional Hilbert spaces of the following basic and 
remarkable property about fidelity. 

Fact 11 Let p, a be density matrices in the same Hilbert space TC. Let KL be a disjoint Hilbert space such 
that dim(/C) > dim('H). Then for any purification |^) of p in Ti^fC, there exists a purification |(/)) of a in 
H^K, such that B{p, a) = \ {ip\(f))\. 

For two probability distributions P, Q on the same sample space Q, their fidelity is defined as B{P, Q) = 
X^xeri V P{^)Qi^)- We will need the following result about fidelity proved by Fuchs and Caves |FC95 1. 

Fact 12 Let p, a be density matrices in the same Hilbert space TC. Then B{p, a) = inf B{Mp, Ma), where 

M 

A4 ranges over POVM's on Ti. In fact, the infimum above can be attained by a complete von Neumann 
measurement on TC. 

The following fundamental fact (see e.g INCOOl ') states that the relative entropy can only decrease on 
performing a measurement. 

Fact 13 (Monotonicity of relative entropy) Let p, a be density matrices in the same finite dimensional 
Hilbert space H. Let M be a POVM on H. Then, S{Mp\\Ma) < S{p\\a). 

We require the following explicit expression for the trace distance of two pure states (see e.g. INCOOl ). 



Fact 14 For pure states |^) and\(j)) in the same Hilbert space, ~ l</')(</'l 111 = 2^/1- 

The following information-theoretic fact follows easily from the definitions. 

Fact 15 Let X, M be quantum systems with some joint density matrix, where X is a classical random 
variable. Let Px denote the (marginal) probability that X = x and p^ denote the conditional density matrix 
of M given that X = x. Let p denote the reduced density matrix of M. Note that p = J2xPxP^- Then, 
I{X:M) = Y.xP^S{p-\\p)- 

We now recall the following direct connection between relative entropy and fidelity observed in the 
classical setting by IDHR78I . and in the quantum setting by Klauck (private communication). 

Fact 16 Let p and a be two density matrices in the same Hilbert space. Then, 

l-B(A..)<"°^'f"'''. 

Proof: Let J\A be the complete von Neumann measurement that achieves the infimum in Fact^J Let 
O denote the set of possible (classical) outcomes of M.. Define probability distributions P = M.p and 
Q = M.a. From Fact^Jand concavity of the log function it follows that 



S{p\\a) ^ ^(^IIQ) iQi^ 



P{x) 



< log J2 \IQ{x)P{x) = log B{P, Q) = log B{p, a) 
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Thus, B{p, a) > 2-^(^ll'^)/2 = exp(-(ln 2)S{p\\a)/2) > 1 - ((In 2)S{p\\a)/2). ■ 
We can now prove Fact|51 

Fact |9] (Average encoding theorem, quantum version) Let X, M be quantum systems with some joint 
density matrix. Let X be a classical random variable and px denote the (marginal) probability that X = x. 
Let 7i denote the Hilbert space of M and p^ denote the conditional density matrix of M given that X = x. 
Let p denote the reduced density matrix of M. Note that p = PxP^- Let fC denote a disjoint Hilbert 
space such that dim(/C) > dim('H). Let be purifications of p^ in TL^IC. Then there exist purifications 
of p in Ti ® K, such that 
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Proof: Using the concavity of the square root function, Facts ^2 [Ml and the fact that fideUty is 
always at most 1, we get 
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